Medium severity6.5NVD Advisory· Published Sep 15, 2025· Updated Apr 15, 2026

CVE-2025-57176

Description

On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.cisa.gov/news-events/ics-advisories/icsa-26-069-04nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000